rmeoved logs
added permission check to api and removed log info